# ADR 049: Zizmor & actionlint (GitHub Actions Security)

- HTML version: https://robbiepalmer.me/projects/agentic-code-review/adrs/020-zizmor
- Project: Agentic Code Review (https://robbiepalmer.me/projects/agentic-code-review.md)
- Status: Accepted
- Date: 2026-06-27
- Inherited from project: personal-site (https://robbiepalmer.me/projects/personal-site/adrs/049-zizmor.md)

actionlint and zizmor validate the GitHub Actions workflows that test, scan, and
deploy the service. Their checks are especially relevant to workflows handling
the GitHub App, Cloudflare, Doppler, and OpenRouter credentials.

## Notes for Agentic Code Review

actionlint and zizmor validate the GitHub Actions workflows that test, scan, and
deploy the service. Their checks are especially relevant to workflows handling
the GitHub App, Cloudflare, Doppler, and OpenRouter credentials.

---

Markdown index of this site: https://robbiepalmer.me/llms.txt